Statewiseby[codeliance]Alpha

Default-high privacy for minors

Every jurisdiction with a known obligation of this type, with age brackets, citations, and verification dates.

← Back to matrix
Covered entity

7 jurisdictions with a known requirement · 44 none known · 0 unknown (unresearched or not yet decomposed)

Arkansas

Social Media Safety Act amendments (Act 900 of 2025 / SB 611)EnjoinedResearchedlast verified 2026-07-04
Under 1313–15

Default minor accounts to the most protective privacy and safety settings the platform offers.

Statute’s own ages: Applies to minor users (under 16).

Ark. Act 900 of 2025 (SB 611), § 1402(d) default-settings mandate: section pin pending primary-text verification

California

California Age-Appropriate Design Code Act (AB 2273)In forceResearchedlast verified 2026-07-04
Under 1313–1516–17

Set all default privacy settings offered to children to the highest level of privacy, unless a compelling reason supports a different setting in the child's best interests.

Statute’s own ages: Applies to users under 18.

Cal. Civ. Code § 1798.99.31(a)(6)
Protecting Our Kids from Social Media Addiction Act (SB 976)In forceResearchedlast verified 2026-07-04
Under 1313–1516–17

By default, set a known minor's account to a private mode in which only users connected to the minor's account can view or interact with the minor's content, absent a permitted change.

Statute’s own ages: Applies to users under 18 located in California.

Cal. Health & Safety Code §§ 27000 et seq. (SB 976, 2024): provision section pin pending verification; the private-mode default was upheld against facial challenge by the Ninth Circuit on 2025-09-09

Indiana

Indiana Minor Access and Use of Social Media (HEA 1408, HB 1408)DelayedResearchedlast verified 2026-07-04
Under 1313–15

Apply locked default safety settings to minor accounts, restricting direct messages and search visibility.

Statute’s own ages: Applies to accounts held by Indiana residents under 16

HEA 1408 (2026), Pub. L. 100-2026, new IC social-media chapter; section pin pending verification

Maryland

Maryland Age-Appropriate Design Code Act ("Maryland Kids Code", HB 603 / SB 571)In forceResearchedlast verified 2026-07-04
Under 1313–1516–17

Configure default privacy settings for minors to the highest level of protection unless the business can show a compelling reason a different setting is in the child's best interests.

Statute’s own ages: Applies to users under 18.

Md. Code Ann., Com. Law, Maryland AADC subtitle (HB 603, Ch. 461, 2024), section pin pending primary-text verification

Nebraska

Age-Appropriate Online Design Code Act (LB 504)In forceResearchedlast verified 2026-07-04
Under 1313–1516–17

Set the default settings of covered design features to the highest level of privacy protection available for minor users.

Statute’s own ages: Applies to 'minors'; the Act is styled as an Age-Appropriate Online Design Code (under-18 model). Exact statutory age cut-lines pending primary-text verification.

Neb. LB 504 (109th Leg., 2025): Age-Appropriate Online Design Code Act; section pin pending primary-text verification

New York

Safe by Design Act (Stop Online Predators Act)ProposedResearchedlast verified 2026-07-04
Under 1313–1516–17

Set covered minors' accounts, by default, to restrict unconnected users from sending them direct messages, viewing their full profile, tagging them, viewing their location data, downloading their media, and engaging in financial transactions with them.

Statute’s own ages: Applies to 'covered minors' (users under 18).

N.Y. Gen. Bus. Law (Safe by Design Act, Part Y of Ch. 58 of 2026; S4609A/A6549A); section pin pending verification against the enacted text

Utah

Minor Protection in Social Media Act (S.B. 194, 2024, as amended by H.B. 464, 2024)EnjoinedResearchedlast verified 2026-07-04
Under 1313–1516–17

Apply protective default settings to minor accounts: restricting account and post visibility and searchability to connected accounts, disabling search-engine indexing, limiting direct messaging to connected accounts, and limiting collection and sale of a minor's data to what a core function requires.

Statute’s own ages: Applies to minor account holders (under 18).

Utah Code § 13-71 (minor default settings): section pin pending primary-text verification